$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: bEGUTKa4wKS8oVMw49E3c1zb59awjaIOnt/oqByqkkA= Subject key identifier: 3D:2E:FB:78:97:B0:0E:66:3F:68:5E:00:CC:56:CD:DE:B8:9E:FA:C6 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 04E3 Signing time: Thu 07 Aug 2025 00:14:26 +0000 Manifest this update: Thu 07 Aug 2025 00:14:25 +0000 Manifest next update: Thu 14 Aug 2025 00:14:25 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: mrKBpzclSoQLKP4/G36EWHUbGs1Q5bBHSD6adZ1vv2c=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Aug 7 00:14:25 2025 GMT Not After : Aug 14 00:14:25 2025 GMT Subject: CN=6893efe1-d7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:3b:06:db:32:18:86:72:66:4c:a3:a1:2f: 88:7a:a7:f2:a2:f4:08:42:ea:de:19:9f:5d:db:a1: f3:cd:41:dd:d5:99:89:e3:4a:02:c9:d1:0e:14:47: 77:0a:c5:db:28:a1:42:ab:ac:f2:52:c6:d4:f6:45: 6e:d0:be:82:ce:87:73:70:fe:cb:21:94:02:44:30: 47:ca:f3:fa:03:07:d8:69:ea:c5:f4:34:7f:a6:82: 18:8e:8c:2c:e1:f4:19:34:71:a7:2d:99:6d:13:dc: 34:03:f3:9a:19:89:57:72:02:99:a1:86:a9:eb:22: a5:34:cd:d0:2c:ae:b4:05:13:7a:1d:db:a7:cd:6a: 05:2e:b0:76:c8:28:a2:2c:eb:8b:79:ef:fb:2d:c7: ec:20:4d:e4:06:ea:e2:6a:48:1c:36:f1:f6:1e:07: 0f:51:ec:01:87:81:e3:bb:51:fb:90:19:9d:18:19: 35:42:8b:63:53:c7:be:b6:8b:6b:0d:6d:8f:02:13: 77:9d:9d:fc:5b:35:7e:79:b0:f6:48:86:3a:e1:0f: 30:8c:ce:20:d8:68:3e:b2:04:75:47:30:18:87:2b: a6:66:f1:a6:ad:7d:e2:e0:20:6f:43:75:47:35:6a: 6d:5c:f0:47:69:91:cf:c1:32:18:61:7a:a9:a9:1e: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:FB:78:97:B0:0E:66:3F:68:5E:00:CC:56:CD:DE:B8:9E:FA:C6 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:24:df:e2:37:fd:71:42:0d:33:bc:83:6c:2b:57:7e:78:19: 27:d5:68:81:2d:ce:84:c8:37:a3:01:0d:82:c1:73:84:5e:90: 8c:cf:90:7d:2e:86:08:ca:bd:a6:01:7f:c3:22:5d:1a:30:4c: e3:f5:9c:79:cf:d3:b6:55:51:40:8a:76:18:c1:db:37:3c:77: 25:45:bc:68:cc:0e:f8:9b:4e:f5:0f:7c:99:f7:7b:5f:c4:21: 2e:6f:5c:31:36:cf:91:01:f2:ce:46:af:e0:4c:c3:fa:f4:a2: 41:c8:d3:5f:3c:d5:2e:4a:76:c1:2c:62:f3:63:73:0b:64:32: 7e:b9:76:1e:07:13:2f:31:c4:96:6b:77:1d:18:4e:5e:0d:b4: 21:a0:e3:85:4b:d2:24:48:06:9c:31:1e:76:c6:aa:81:5f:3b: e2:f5:eb:84:37:64:c1:75:dd:3d:72:e2:f2:25:e9:9e:eb:d7: 91:ae:86:57:53:d8:36:67:88:a4:e2:b2:93:cb:85:c1:e3:50: 1a:ac:4e:c0:a0:70:d3:16:0c:26:79:47:59:fb:a1:1f:ba:28: 52:ac:ec:db:78:3a:fb:b9:27:43:83:0d:b9:9b:f3:ff:2f:d2: 54:04:89:de:ad:9f:f7:b9:ba:cc:59:92:e3:c9:27:f5:e2:fc: 21:6f:1a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUwODA3MDAxNDI1WhcNMjUwODE0MDAxNDI1WjAYMRYwFAYD VQQDEw02ODkzZWZlMS1kN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/s7BtsyGIZyZkyjoS+IeqfyovQIQureGZ9d26HzzUHd1ZmJ40oCydEOFEd3 CsXbKKFCq6zyUsbU9kVu0L6CzodzcP7LIZQCRDBHyvP6AwfYaerF9DR/poIYjows 4fQZNHGnLZltE9w0A/OaGYlXcgKZoYap6yKlNM3QLK60BRN6HdunzWoFLrB2yCii LOuLee/7LcfsIE3kBuriakgcNvH2HgcPUewBh4Hju1H7kBmdGBk1QotjU8e+totr DW2PAhN3nZ38WzV+ebD2SIY64Q8wjM4g2Gg+sgR1RzAYhyumZvGmrX3i4CBvQ3VH NWptXPBHaZHPwTIYYXqpqR7/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0u+3iX sA5mP2heAMxWzd64nvrGMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJN/iN/1xQg0zvINsK1d+eBkn1WiBLc6EyDejAQ2CwXOEXpCMz5B9 LoYIyr2mAX/DIl0aMEzj9Zx5z9O2VVFAinYYwds3PHclRbxozA74m071D3yZ93tf xCEub1wxNs+RAfLORq/gTMP69KJByNNfPNUuSnbBLGLzY3MLZDJ+uXYeBxMvMcSW a3cdGE5eDbQhoOOFS9IkSAacMR52xqqBXzvi9euEN2TBdd09cuLyJeme69eRroZX U9g2Z4ik4rKTy4XB41AarE7AoHDTFgwmeUdZ+6EfuihSrOzbeDr7uSdDgw25m/P/ L9JUBInerZ/3ubrMWZLjySf14vwhbxpx -----END CERTIFICATE-----Generated at Fri Aug 8 00:42:42 2025 by rpki-client